facebook.affixlink.app
Category: Phishing And Fraud
To use full-featured product, you have to purchase a license for Combo Cleaner. Limited seven days free trial available. Combo Cleaner is owned and operated by RCS LT, the parent company of PCRisk.com.
Description of facebook.affixlink.app
The domain facebook.affixlink.app appears to present itself as a Facebook login page. The page title is "Facebook," and the screenshot shows a sign-in form styled to resemble Facebook's interface, including Facebook and Meta branding elements, language options, and a login prompt in Indonesian.
Based on the domain structure, this does not appear to be an official Facebook-owned domain. Instead, it is a subdomain under affixlink.app, which suggests it may be operated by a third party rather than by the social media platform it visually references. The content and branding indicate that the page is likely intended to capture user credentials by imitating a well-known social media service.
Safety Assessment for facebook.affixlink.app
Multiple risk indicators were present at the time of this scan. The domain was flagged by 18 out of 91 security engines, and several web-classification sources categorized it as phishing or fraud-related. The page also closely imitates Facebook's branding and login experience while using a different domain, which may indicate a look-alike page intended to mislead visitors into entering account credentials.
Although the malware scan did not detect malicious files at the time of review, that result does not outweigh the broader phishing signals. In addition, the domain's IP address was listed on one mail-reputation blocklist, which is a weaker signal on its own but still worth noting. Based on these findings, this website may pose potential risks to visitors.
Technical Description
The site was using a valid Let's Encrypt SSL certificate at the time of this scan, hosted on an Apache web server with infrastructure attributed to Interserver, Inc. The server IP resolved to 209.159.155.2 in Secaucus, United States. SSL presence indicates encrypted transport, but it does not by itself verify legitimacy.
The domain is approximately 4 years old, registered through PDR Ltd. d/b/a PublicDomainRegistry.com, and configured with custom nameservers. DNSSEC appears to be unsigned, which means DNS responses may lack an additional layer of authenticity protection. No malicious files or flagged external links were identified in the limited page scan, but the primary concern appears to be deceptive page content rather than exploit delivery.
Share your experience with this website. Was it safe? Did you encounter any issues?